Microsoft Windows Hyper-V Integer Overflow Vulnerability Leading to Privilege Escalation

A vulnerability allowing privilege escalation has been identified in Windows Hyper-V. This issue arises from an integer overflow or wraparound, which can be exploited by an authorized attacker to elevate privileges locally. The vulnerability affects several versions of Windows, including Windows Server 2012 R2, Windows Server 2016, Windows 10, Windows Server 2022, Windows 11, and Windows Server 2025.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5065425, KB5065426, KB5065427, KB5065428, KB5065430, KB5065431, KB5065507, KB5065509, and KB5065429.